From 01a99a9acf4c54bfd3ea1e22df86601482094aac Mon Sep 17 00:00:00 2001
From: Minteck <minteck@phoenixnet.tech>
Date: Sun, 31 Oct 2021 12:42:48 +0100
Subject: modified:   includes/session.php

---
 includes/session.php | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

(limited to 'includes/session.php')

diff --git a/includes/session.php b/includes/session.php
index ef1f84d..9f38ca4 100644
--- a/includes/session.php
+++ b/includes/session.php
@@ -1,13 +1,15 @@
 <?php
 
-// Insert here the code that validates the user session
+global $_CONFIG;
+$_CONFIG = json_decode(file_get_contents("/mnt/familine/private/FamilineConfig.json"), true);
+
 if ($_SERVER['REMOTE_ADDR'] !== "127.0.0.1" && $_SERVER['REMOTE_ADDR'] !== "::0") {
     if (isset($_COOKIE['FL_SESSION_TOKEN'])) {
         if (file_exists("/mnt/familine/private/tokens/" . str_replace(".", "", str_replace("/", "", $_COOKIE['FL_SESSION_TOKEN'])))) {
             $_PROFILE = json_decode(file_get_contents("/mnt/familine/private/tokens/" . str_replace(".", "", str_replace("/", "", $_COOKIE['FL_SESSION_TOKEN']))), true);
 
             if (isset($_PROFILE['familine'])) {
-                header("Location: https://familine.minteck.org/welcome");
+                header("Location: https://" . $_CONFIG["Global"]["domain"] . "/welcome");
                 die();
             }
 
@@ -15,12 +17,18 @@ if ($_SERVER['REMOTE_ADDR'] !== "127.0.0.1" && $_SERVER['REMOTE_ADDR'] !== "::0"
             $_SUID = $_PROFILE['login'];
             $_FULLNAME = $_PROFILE['name'];
         } else {
-            header("Location: https://familine.minteck.org/welcome");
+            header("Location: https://" . $_CONFIG["Global"]["domain"] . "/welcome");
             die();
         }
     } else {
-        header("Location: https://familine.minteck.org/welcome");
+        header("Location: https://" . $_CONFIG["Global"]["domain"] . "/welcome");
         die();
     }
 
 }
+
+if (isset($_PROFILE["projectRoles"]) && is_array($_PROFILE["projectRoles"]) && isset($_PROFILE["projectRoles"][0]) && is_array($_PROFILE["projectRoles"][0]) && isset($_PROFILE["projectRoles"][0]["role"]) && is_array($_PROFILE["projectRoles"][0]["role"]) && isset($_PROFILE["projectRoles"][0]["role"]["key"]) && is_string($_PROFILE["projectRoles"][0]["role"]["key"]) && $_PROFILE["projectRoles"][0]["role"]["key"] === "system-admin") {
+    $_ADMIN = true;
+} else {
+    $_ADMIN = false;
+}
-- 
cgit